This bug was fixed in the package linux-iot - 5.4.0-1001.3 --------------- linux-iot (5.4.0-1001.3) focal; urgency=medium * focal/linux-iot: 5.4.0-1001.3 -proposed tracker (LP: #1963957) * Disable unprivileged BPF by default (LP: #1961338) - [Config] CONFIG_BPF_UNPRIV_DEFAULT_OFF=y * Support builtin revoked certificates (LP: #1932029) - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys - [Config] add i386 to CONFIG_SYSTEM_REVOCATION_KEYS annotation * Re-enable DEBUG_INFO_BTF where it was disabled (LP: #1945632) - [Config] Enable CONFIG_DEBUG_INFO_BTF on all arches * Packaging resync (LP: #1786013) - [Packaging] update variants [ Ubuntu: 5.4.0-105.119 ] * CVE-2022-0847 - lib/iov_iter: initialize "flags" in new pipe_buffer * Broken network on some AWS instances with focal/impish kernels (LP: #1961968) - SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success" * [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7 (LP: #1960182) - s390/cpumf: Support for CPU Measurement Facility CSVN 7 - s390/cpumf: Support for CPU Measurement Sampling Facility LS bit * Hipersocket page allocation failure on Ubuntu 20.04 based SSC environments (LP: #1959529) - s390/qeth: use memory reserves to back RX buffers * CVE-2022-0516 - KVM: s390: Return error on SIDA memop on normal guest * CVE-2022-0435 - tipc: improve size validations for received domain records * CVE-2022-0492 - cgroup-v1: Require capabilities to set release_agent * Recalled NFSv4 files delegations overwhelm server (LP: #1957986) - NFSv4: Fix delegation handling in update_open_stateid() - NFSv4: nfs4_callback_getattr() should ignore revoked delegations - NFSv4: Delegation recalls should not find revoked delegations - NFSv4: fail nfs4_refresh_delegation_stateid() when the delegation was revoked - NFS: Rename nfs_inode_return_delegation_noreclaim() - NFSv4: Don't remove the delegation from the super_list more than once - NFSv4: Hold the delegation spinlock when updating the seqid - NFSv4: Clear the NFS_DELEGATION_REVOKED flag in nfs_update_inplace_delegation() - NFSv4: Update the stateid seqid in nfs_revoke_delegation() - NFSv4: Revoke the delegation on success in nfs4_delegreturn_done() - NFSv4: Ignore requests to return the delegation if it was revoked - NFSv4: Don't reclaim delegations that have been returned or revoked - NFSv4: nfs4_return_incompatible_delegation() should check delegation validity - NFSv4: Fix nfs4_inode_make_writeable() - NFS: nfs_inode_find_state_and_recover() fix stateid matching - NFSv4: Fix races between open and delegreturn - NFSv4: Handle NFS4ERR_OLD_STATEID in delegreturn - NFSv4: Don't retry the GETATTR on old stateid in nfs4_delegreturn_done() - NFSv4: nfs_inode_evict_delegation() should set NFS_DELEGATION_RETURNING - NFS: Clear NFS_DELEGATION_RETURN_IF_CLOSED when the delegation is returned - NFSv4: Try to return the delegation immediately when marked for return on close - NFSv4: Add accounting for the number of active delegations held - NFSv4: Limit the total number of cached delegations - NFSv4: Ensure the delegation is pinned in nfs_do_return_delegation() - NFSv4: Ensure the delegation cred is pinned when we call delegreturn * Focal update: v5.4.174 upstream stable release (LP: #1960566) - HID: uhid: Fix worker destroying device without any protection - HID: wacom: Reset expected and received contact counts at the same time - HID: wacom: Ignore the confidence flag when a touch is removed - HID: wacom: Avoid using stale array indicies to read contact count - f2fs: fix to do sanity check in is_alive() - nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() - mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings - mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 - x86/gpu: Reserve stolen memory for first integrated Intel GPU - tools/nolibc: x86-64: Fix startup code bug - tools/nolibc: i386: fix initial stack alignment - tools/nolibc: fix incorrect truncation of exit code - rtc: cmos: take rtc_lock while reading from CMOS - media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE - media: flexcop-usb: fix control-message timeouts - media: mceusb: fix control-message timeouts - media: em28xx: fix control-message timeouts - media: cpia2: fix control-message timeouts - media: s2255: fix control-message timeouts - media: dib0700: fix undefined behavior in tuner shutdown - media: redrat3: fix control-message timeouts - media: pvrusb2: fix control-message timeouts - media: stk1160: fix control-message timeouts - can: softing_cs: softingcs_probe(): fix memleak on registration failure - lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() - iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure - dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() - PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller - mm_zone: add function to check if managed dma zone exists - mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode - drm/rockchip: dsi: Hold pm-runtime across bind/unbind - drm/rockchip: dsi: Reconfigure hardware on resume() - drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure - drm/panel: innolux-p079zca: Delete panel on attach() failure - drm/rockchip: dsi: Fix unbalanced clock on probe error - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails - clk: bcm-2835: Pick the closest clock rate - clk: bcm-2835: Remove rounding up the dividers - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND - wcn36xx: Release DMA channel descriptor allocations - media: videobuf2: Fix the size printk format - media: aspeed: fix mode-detect always time out at 2nd run - media: em28xx: fix memory leak in em28xx_init_dev - media: aspeed: Update signal status immediately to ensure sane hw state - arm64: dts: meson-gxbb-wetek: fix HDMI in early boot - arm64: dts: meson-gxbb-wetek: fix missing GPIO binding - Bluetooth: stop proccessing malicious adv data - tee: fix put order in teedev_close_context() - media: dmxdev: fix UAF when dvb_register_device() fails - crypto: qce - fix uaf on qce_ahash_register_one - arm64: dts: ti: k3-j721e: correct cache-sets info - tty: serial: atmel: Check return code of dmaengine_submit() - tty: serial: atmel: Call dma_async_issue_pending() - media: rcar-csi2: Correct the selection of hsfreqrange - media: imx-pxp: Initialize the spinlock prior to using it - media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released - media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' - netfilter: bridge: add support for pppoe filtering - arm64: dts: qcom: msm8916: fix MMC controller aliases - ACPI: EC: Rework flushing of EC work while suspended to idle - drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() - drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() - arm64: dts: ti: k3-j721e: Fix the L2 cache sets - tty: serial: uartlite: allow 64 bit address - serial: amba-pl011: do not request memory region twice - floppy: Fix hang in watchdog when disk is ejected - staging: rtl8192e: return error code from rtllib_softmac_init() - staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() - Bluetooth: btmtksdio: fix resume failure - media: dib8000: Fix a memleak in dib8000_init() - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() - media: si2157: Fix "warm" tuner state detection - sched/rt: Try to restart rt period timer when rt runtime exceeded - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass - mwifiex: Fix possible ABBA deadlock - xfrm: fix a small bug in xfrm_sa_len() - crypto: stm32/cryp - fix xts and race condition in crypto_engine requests - crypto: stm32/cryp - fix double pm exit - crypto: stm32/cryp - fix lrw chaining mode - ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors - media: dw2102: Fix use after free - media: msi001: fix possible null-ptr-deref in msi001_probe() - media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes - drm/msm/dpu: fix safe status debugfs file - drm/bridge: ti-sn65dsi86: Set max register for regmap - media: hantro: Fix probe func error path - xfrm: interface with if_id 0 should return error - xfrm: state and policy should fail if XFRMA_IF_ID 0 - ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding - usb: ftdi-elan: fix memory leak on device disconnect - ARM: dts: armada-38x: Add generic compatible to UART nodes - mmc: meson-mx-sdio: add IRQ check - selinux: fix potential memleak in selinux_add_opt() - bpftool: Enable line buffering for stdout - x86/mce/inject: Avoid out-of-bounds write when setting flags - ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() - bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). - ppp: ensure minimum packet size in ppp_write() - rocker: fix a sleeping in atomic bug - staging: greybus: audio: Check null pointer - fsl/fman: Check for null pointer after calling devm_ioremap - Bluetooth: hci_bcm: Check for error irq - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad - debugfs: lockdown: Allow reading debugfs files that are not world readable - net/mlx5e: Don't block routes with nexthop objects in SW - Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" - net/mlx5: Set command entry semaphore up once got index free - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe - tpm: add request_locality before write TPM_INT_ENABLE - can: softing: softing_startstop(): fix set but not used variable warning - can: xilinx_can: xcan_probe(): check for error irq - pcmcia: fix setting of kthread task states - net: mcs7830: handle usb read errors properly - ext4: avoid trim error on fs with small groups - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls - RDMA/hns: Validate the pkey index - clk: imx8mn: Fix imx8mn_clko1_sels - powerpc/prom_init: Fix improper check of prom_getprop() - ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA - ALSA: oss: fix compile error when OSS_DEBUG is enabled - char/mwave: Adjust io port register size - binder: fix handling of error during copy - iommu/io-pgtable-arm: Fix table descriptor paddr formatting - scsi: ufs: Fix race conditions related to driver data - PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() - powerpc/powermac: Add additional missing lockdep_register_key() - RDMA/core: Let ib_find_gid() continue search even after empty entry - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry - ASoC: rt5663: Handle device_property_read_u32_array error codes - clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell - dmaengine: pxa/mmp: stop referencing config->slave_id - iommu/iova: Fix race between FQ timeout and teardown - phy: uniphier-usb3ss: fix unintended writing zeros to PHY register - ASoC: samsung: idma: Check of ioremap return value - misc: lattice-ecp3-config: Fix task hung when firmware load failed - mips: lantiq: add support for clk_set_parent() - mips: bcm63xx: add support for clk_set_parent() - RDMA/cxgb4: Set queue pair state when being queried - of: base: Fix phandle argument length mismatch error message - Bluetooth: Fix debugfs entry leak in hci_register_dev() - fs: dlm: filter user dlm messages for kernel locks - drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y - ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply - drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR - ARM: shmobile: rcar-gen2: Add missing of_node_put() - batman-adv: allow netlink usage in unprivileged containers - usb: gadget: f_fs: Use stream_open() for endpoint files - drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L - HID: apple: Do not reset quirks when the Fn key is not found - media: b2c2: Add missing check in flexcop_pci_isr: - EDAC/synopsys: Use the quirk for version instead of ddr version - mlxsw: pci: Add shutdown method in PCI driver - drm/bridge: megachips: Ensure both bridges are probed before registration - gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use - HSI: core: Fix return freed object in hsi_new_client - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() - rsi: Fix use-after-free in rsi_rx_done_handler() - rsi: Fix out-of-bounds read in rsi_read_pkt() - usb: uhci: add aspeed ast2600 uhci support - floppy: Add max size check for user space request - x86/mm: Flush global TLB when switching to trampoline page-table - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. - media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() - media: m920x: don't use stack on USB reads - iwlwifi: mvm: synchronize with FW after multicast commands - ath10k: Fix tx hanging - net-sysfs: update the queue counts in the unregistration path - net: phy: prefer 1000baseT over 1000baseKX - gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock - x86/mce: Mark mce_panic() noinstr - x86/mce: Mark mce_end() noinstr - x86/mce: Mark mce_read_aux() noinstr - net: bonding: debug: avoid printing debug logs when bond is not notifying peers - bpf: Do not WARN in bpf_warn_invalid_xdp_action() - HID: quirks: Allow inverting the absolute X/Y values - media: igorplugusb: receiver overflow should be reported - media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO - audit: ensure userspace is penalized the same as the kernel when under pressure - arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus - arm64: tegra: Adjust length of CCPLEX cluster MMIO region - cpufreq: Fix initialization of min and max frequency QoS requests - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream - iwlwifi: fix leaks/bad data after failed firmware load - iwlwifi: remove module loading failure message - iwlwifi: mvm: Fix calculation of frame length - um: registers: Rename function names to avoid conflicts and build problems - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() - ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions - ACPICA: Utilities: Avoid deleting the same object twice in a row - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() - ACPICA: Fix wrong interpretation of PCC address - ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 - drm/amdgpu: fixup bad vram size on gmc v8 - ACPI: battery: Add the ThinkPad "Not Charging" quirk - btrfs: remove BUG_ON() in find_parent_nodes() - btrfs: remove BUG_ON(!eie) in find_parent_nodes - net: mdio: Demote probed message to debug print - mac80211: allow non-standard VHT MCS-10/11 - dm btree: add a defensive bounds check to insert_at() - dm space map common: add bounds check to sm_ll_lookup_bitmap() - net: phy: marvell: configure RGMII delays for 88E1118 - net: gemini: allow any RGMII interface mode - regulator: qcom_smd: Align probe function with rpmh-regulator - serial: pl010: Drop CR register reset on set_termios - serial: core: Keep mctrl register state and cached copy in sync - random: do not throw away excess input to crng_fast_load - parisc: Avoid calling faulthandler_disabled() twice - powerpc/6xx: add missing of_node_put - powerpc/powernv: add missing of_node_put - powerpc/cell: add missing of_node_put - powerpc/btext: add missing of_node_put - powerpc/watchdog: Fix missed watchdog reset due to memory ordering race - i2c: i801: Don't silently correct invalid transfer size - powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING - i2c: mpc: Correct I2C reset procedure - clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB - powerpc/powermac: Add missing lockdep_register_key() - KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST - w1: Misuse of get_user()/put_user() reported by sparse - scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup - ALSA: seq: Set upper limit of processed events - powerpc: handle kdump appropriately with crash_kexec_post_notifiers option - MIPS: OCTEON: add put_device() after of_find_device_by_node() - i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters - MIPS: Octeon: Fix build errors using clang - scsi: sr: Don't use GFP_DMA - ASoC: mediatek: mt8173: fix device_node leak - power: bq25890: Enable continuous conversion for ADC at charging - rpmsg: core: Clean up resources on announce_create failure. - crypto: omap-aes - Fix broken pm_runtime_and_get() usage - crypto: stm32/crc32 - Fix kernel BUG triggered in probe() - crypto: caam - replace this_cpu_ptr with raw_cpu_ptr - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers - fuse: Pass correct lend value to filemap_write_and_wait_range() - serial: Fix incorrect rs485 polarity on uart open - cputime, cpuacct: Include guest time in user time in cpuacct.stat - tracing/kprobes: 'nmissed' not showed correctly for kretprobe - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds - s390/mm: fix 2KB pgtable release race - drm/etnaviv: limit submit sizes - drm/nouveau/kms/nv04: use vzalloc for nv04_display - drm/bridge: analogix_dp: Make PSR-exit block less - PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space - PCI: pci-bridge-emul: Correctly set PCIe capabilities - PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device - xfrm: fix policy lookup for ipv6 gre packets - btrfs: fix deadlock between quota enable and other quota operations - btrfs: check the root node for uptodate before returning it - btrfs: respect the max size in the header when activating swap file - ext4: make sure to reset inode lockdep class when quota enabling fails - ext4: make sure quota gets properly shutdown on error - ext4: set csum seed in tmp inode while migrating to extents - ext4: Fix BUG_ON in ext4_bread when write quota data - ext4: don't use the orphan list when migrating an inode - drm/radeon: fix error handling in radeon_driver_open_kms - of: base: Improve argument length mismatch error - firmware: Update Kconfig help text for Google firmware - media: rcar-csi2: Optimize the selection PHTW register - Documentation: dmaengine: Correctly describe dmatest with channel unset - Documentation: ACPI: Fix data node reference documentation - Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization - Documentation: fix firewire.rst ABI file path error - scsi: core: Show SCMD_LAST in text form - RDMA/hns: Modify the mapping attribute of doorbell to device - RDMA/rxe: Fix a typo in opcode name - dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK - Revert "net/mlx5: Add retry mechanism to the command entry index allocation" - powerpc/cell: Fix clang -Wimplicit-fallthrough warning - powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses - bpftool: Remove inclusion of utilities.mak from Makefiles - ipv4: avoid quadratic behavior in netns dismantle - net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module - parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries - f2fs: fix to reserve space for IO align feature - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress - clk: si5341: Fix clock HW provider cleanup - net: axienet: limit minimum TX ring size - net: axienet: fix number of TX ring slots for available check - net: axienet: increase default TX ring size to 128 - rtc: pxa: fix null pointer dereference - inet: frags: annotate races around fqdir->dead and fqdir->high_thresh - netns: add schedule point in ops_exit_list() - xfrm: Don't accidentally set RTO_ONLINK in decode_session4() - gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() - libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() - perf script: Fix hex dump character output - dmaengine: at_xdmac: Don't start transactions at tx_submit level - dmaengine: at_xdmac: Print debug message after realeasing the lock - dmaengine: at_xdmac: Fix concurrency over xfers_list - dmaengine: at_xdmac: Fix lld view setting - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition - arm64: dts: qcom: msm8996: drop not documented adreno properties - net_sched: restore "mpu xxx" handling - bcmgenet: add WOL IRQ check - net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() - dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property - dt-bindings: display: meson-vpu: Add missing amlogic,canvas property - scripts/dtc: dtx_diff: remove broken example from help text - lib82596: Fix IRQ check in sni_82596_probe - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test - mtd: nand: bbt: Fix corner case in bad block table handling - Revert "ia64: kprobes: Use generic kretprobe trampoline handler" - Linux 5.4.174 * Focal update: v5.4.173 upstream stable release (LP: #1959701) - kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test - devtmpfs regression fix: reconfigure on each mount - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() - perf: Protect perf_guest_cbs with RCU - KVM: s390: Clarify SIGP orders versus STOP/RESTART - media: uvcvideo: fix division by zero at stream start - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled - firmware: qemu_fw_cfg: fix sysfs information leak - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries - firmware: qemu_fw_cfg: fix kobject leak in probe error path - KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows - mtd: fixup CFI on ixp4xx - ARM: 9025/1: Kconfig: CPU_BIG_ENDIAN depends on !LD_IS_LLD - Linux 5.4.173 * Focal update: v5.4.172 upstream stable release (LP: #1959698) - workqueue: Fix unbind_workers() VS wq_worker_running() race - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() - Bluetooth: bfusb: fix division by zero in send path - USB: core: Fix bug in resuming hub's handling of wakeup requests - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status - mmc: sdhci-pci: Add PCI ID for Intel ADL - veth: Do not record rx queue hint in veth_xmit - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() - drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions - can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} - random: fix data race on crng_node_pool - random: fix data race on crng init time - random: fix crash on multiple early calls to add_bootloader_randomness() - media: Revert "media: uvcvideo: Set unique vdev name based in type" - staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() - staging: greybus: fix stack size warning with UBSAN - Linux 5.4.172 * Focal update: v5.4.171 upstream stable release (LP: #1959437) - f2fs: quota: fix potential deadlock - Input: touchscreen - Fix backport of a02dcde595f7cbd240ccd64de96034ad91cffc40 - selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv() - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() - tracing: Tag trace_percpu_buffer as a percpu pointer - ieee802154: atusb: fix uninit value in atusb_set_extended_addr - iavf: Fix limit of total number of queues to active queues of VF - RDMA/core: Don't infoleak GRH fields - RDMA/uverbs: Check for null return of kmalloc_array - mac80211: initialize variable have_higher_than_11mbit - i40e: fix use-after-free in i40e_sync_filters_subtask() - i40e: Fix for displaying message regarding NVM version - i40e: Fix incorrect netdev's real number of RX/TX queues - ipv4: Check attribute length for RTA_GATEWAY in multipath route - ipv4: Check attribute length for RTA_FLOW in multipath route - ipv6: Check attribute length for RTA_GATEWAY in multipath route - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route - lwtunnel: Validate RTA_ENCAP_TYPE attribute length - batman-adv: mcast: don't send link-local multicast to mcast routers - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081 - power: supply: core: Break capacity loop - power: reset: ltc2952: Fix use of floating point literals - rndis_host: support Hytera digital radios - phonet: refcount leak in pep_sock_accep - ipv6: Continue processing multipath route even if gateway attribute is invalid - ipv6: Do cleanup if attribute validation fails in multipath route - usb: mtu3: fix interval value for intr and isoc - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate - net: udp: fix alignment problem in udp4_seq_show() - atlantic: Fix buff_ring OOB in aq_ring_rx_clean - mISDN: change function names to avoid conflicts - Linux 5.4.171 * Focal update: v5.4.170 upstream stable release (LP: #1958898) - tee: handle lookup of shm with reference count 0 - Input: i8042 - add deferred probe support - Input: i8042 - enable deferred probe quirk for ASUS UM325UA - tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). - platform/x86: apple-gmux: use resource_size() with res - memblock: fix memblock_phys_alloc() section mismatch error - recordmcount.pl: fix typo in s390 mcount regex - selinux: initialize proto variable in selinux_ip_postroute_compat() - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources - sctp: use call_rcu to free endpoint - net: usb: pegasus: Do not drop long Ethernet frames - net: lantiq_xrx200: fix statistics of received bytes - NFC: st21nfca: Fix memory leak in device probe and remove - ionic: Initialize the 'lif->dbid_inuse' bitmap - net/mlx5e: Fix wrong features assignment in case of error - selftests/net: udpgso_bench_tx: fix dst ip argument - net/ncsi: check for error return from call to nla_put_u32 - fsl/fman: Fix missing put_device() call in fman_port_probe - i2c: validate user data in compat ioctl - nfc: uapi: use kernel size_t to fix user-space builds - uapi: fix linux/nfc.h userspace compilation errors - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. - usb: mtu3: add memory barrier before set GPD's HWO - usb: mtu3: fix list_head check warning - usb: mtu3: set interval of FS intr and isoc endpoint - binder: fix async_free_space accounting for empty parcels - scsi: vmw_pvscsi: Set residual data length conditionally - Input: appletouch - initialize work before device registration - Input: spaceball - fix parsing of movement data packets - net: fix use-after-free in tw_timer_handler - perf script: Fix CPU filtering of a script's switch events - Linux 5.4.170 * Focal update: v5.4.170 upstream stable release (LP: #1958898) // HID_ASUS should depend on USB_HID in stable v4.15 backports (LP: #1959762) - HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option * Focal update: v5.4.169 upstream stable release (LP: #1958557) - net: usb: lan78xx: add Allied Telesis AT29M2-AF - serial: 8250_fintek: Fix garbled text for console - arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode - spi: change clk_disable_unprepare to clk_unprepare - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() - netfilter: fix regression in looped (broad|multi)cast's MAC handling - qlcnic: potential dereference null pointer of rx_queue->page_ring - net: accept UFOv6 packages in virtio_net_hdr_to_skb - net: skip virtio_net_hdr_set_proto if protocol already set - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module - bonding: fix ad_actor_system option setting to default - fjes: Check for error irq - drivers: net: smc911x: Check for error irq - sfc: falcon: Check null pointer of rx_queue->page_ring - Input: elantech - fix stack out of bound access in elantech_change_report_id() - hwmon: (lm90) Fix usage of CONFIG2 register in detect function - hwmon: (lm90) Add max6654 support to lm90 driver - hwmon: (lm90) Add basic support for TI TMP461 - hwmon: (lm90) Introduce flag indicating extended temperature support - hwmon: (lm90) Drop critical attribute support for MAX6654 - ALSA: jack: Check the return value of kstrdup() - ALSA: drivers: opl3: Fix incorrect use of vp->state - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 - Input: atmel_mxt_ts - fix double free in mxt_read_info_block - ipmi: bail out if init_srcu_struct fails - ipmi: ssif: initialize ssif_info->client early - ipmi: fix initialization when workqueue allocation fails - parisc: Correct completer in lws start - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines - mmc: sdhci-tegra: Fix switch to HS400ES mode - mmc: core: Disable card detect during shutdown - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling - tee: optee: Fix incorrect page free bug - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() - usb: gadget: u_ether: fix race in setting MAC address in setup phase - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state - mm: mempolicy: fix THP allocations escaping mempolicy restrictions - pinctrl: mediatek: fix global-out-of-bounds issue - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681 - hwmon: (lm90) Do not report 'busy' status bit as alarm - ax25: NPD bug when detaching AX25 device - hamradio: defer ax25 kfree after unregister_netdev - hamradio: improve the incomplete fix to avoid NPD - phonet/pep: refuse to enable an unbound pipe - Linux 5.4.169 * Focal update: v5.4.168 upstream stable release (LP: #1957991) - KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE - mac80211: mark TX-during-stop for TX in in_reconfig - mac80211: send ADDBA requests using the tid/queue of the aggregation session - firmware: arm_scpi: Fix string overflow in SCPI genpd driver - virtio_ring: Fix querying of maximum DMA mapping size for virtio device - recordmcount.pl: look for jgnop instruction as well as bcrl on s390 - dm btree remove: fix use after free in rebalance_children() - audit: improve robustness of the audit queue handling - iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda - nfsd: fix use-after-free due to delegation race - arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas- edge - arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply - arm64: dts: rockchip: fix audio-supply for Rock Pi 4 - mac80211: track only QoS data frames for admission control - ARM: socfpga: dts: fix qspi node compatible - clk: Don't parent clks until the parent is fully registered - selftests: net: Correct ping6 expected rc from 2 to 1 - s390/kexec_file: fix error handling when applying relocations - sch_cake: do not call cake_destroy() from cake_init() - inet_diag: use jiffies_delta_to_msecs() - inet_diag: fix kernel-infoleak for UDP sockets - selftests: Fix raw socket bind tests with VRF - selftests: Fix IPv6 address bind tests - dmaengine: st_fdma: fix MODULE_ALIAS - selftest/net/forwarding: declare NETIFS p9 p10 - mac80211: agg-tx: refactor sending addba - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock - mac80211: accept aggregation sessions on 6 GHz - mac80211: fix lookup when adding AddBA extension element - net: sched: lock action when translating it to flow_action infra - flow_offload: return EOPNOTSUPP for the unsupported mpls action type - rds: memory leak in __rds_conn_create() - soc/tegra: fuse: Fix bitwise vs. logical OR warning - igb: Fix removal of unicast MAC filters of VFs - igbvf: fix double free in `igbvf_probe` - ixgbe: set X550 MDIO speed before talking to PHY - netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc - net: Fix double 0x prefix print in SKB dump - net/smc: Prevent smc_release() from long blocking - net: systemport: Add global locking for descriptor lifecycle - sit: do not call ipip6_dev_free() from sit_init_net() - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error - PCI/MSI: Mask MSI-X vectors only on success - usb: xhci: Extend support for runtime power management for AMD's Yellow carp. - USB: serial: cp210x: fix CP2105 GPIO registration - USB: serial: option: add Telit FN990 compositions - timekeeping: Really make sure wall_to_monotonic isn't positive - libata: if T_LENGTH is zero, dma direction should be DMA_NONE - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE - mac80211: validate extended element ID is present - mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO - Input: touchscreen - avoid bitwise vs logical OR warning - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name - xsk: Do not sleep in poll() when need_wakeup set - media: mxl111sf: change mutex_init() location - fuse: annotate lock in fuse_reverse_inval_entry() - ovl: fix warning in ovl_create_real() - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() - rcu: Mark accesses to rcu_state.n_force_qs - mac80211: fix regression in SSN handling of addba tx - net: sched: Fix suspicious RCU usage while accessing tcf_tunnel_info - Revert "xsk: Do not sleep in poll() when need_wakeup set" - xen/blkfront: harden blkfront against event channel storms - xen/netfront: harden netfront against event channel storms - xen/console: harden hvc_xen against event channel storms - xen/netback: fix rx queue stall detection - xen/netback: don't queue unlimited number of packages - Linux 5.4.168 * Focal update: v5.4.167 upstream stable release (LP: #1957987) - nfc: fix segfault in nfc_genl_dump_devices_done - drm/msm/dsi: set default num_data_lanes - net/mlx4_en: Update reported link modes for 1/10G - parisc/agp: Annotate parisc agp init functions with __init - i2c: rk3x: Handle a spurious start completion interrupt flag - net: netlink: af_netlink: Prevent empty skb by adding a check on len. - drm/amd/display: Fix for the no Audio bug with Tiled Displays - drm/amd/display: add connector type check for CRC source set - tracing: Fix a kmemleak false positive in tracing_map - KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req - selinux: fix race condition when computing ocontext SIDs - bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc - hwmon: (dell-smm) Fix warning on /proc/i8k creation error - memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER - memblock: align freed memory map on pageblock boundaries with SPARSEMEM - memblock: ensure there is no overflow in memblock_overlaps_region() - arm: extend pfn_valid to take into account freed memory map alignment - arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM - Linux 5.4.167 * Packaging resync (LP: #1786013) - [Packaging] resync getabis [ Ubuntu: 5.4.0-104.118 ] * CVE-2022-23960 - SAUCE: kvm: arm: fix build on 32-bit [ Ubuntu: 5.4.0-103.117 ] * CVE-2022-23960 - arm64: Add part number for Arm Cortex-A77 - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: Add Cortex-X2 CPU part definition - arm64: add ID_AA64ISAR2_EL1 sys register - SAUCE: arm64: entry.S: Add ventry overflow sanity checks - SAUCE: arm64: entry: Make the trampoline cleanup optional - SAUCE: arm64: entry: Free up another register on kpti's tramp_exit path - SAUCE: arm64: entry: Move the trampoline data page before the text page - SAUCE: arm64: entry: Allow tramp_alias to access symbols after the 4K boundary - SAUCE: arm64: entry: Don't assume tramp_vectors is the start of the vectors - SAUCE: arm64: entry: Move trampoline macros out of ifdef'd section - SAUCE: arm64: entry: Make the kpti trampoline's kpti sequence optional - SAUCE: arm64: entry: Allow the trampoline text to occupy multiple pages - SAUCE: arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations - SAUCE: arm64: entry: Add vectors that have the bhb mitigation sequences - SAUCE: arm64: entry: Add macro for reading symbol addresses from the trampoline - SAUCE: arm64: Add percpu vectors for EL1 - SAUCE: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 - SAUCE: KVM: arm64: Add templates for BHB mitigation sequences - SAUCE: arm64: Mitigate spectre style branch history side channels - SAUCE: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated - SAUCE: arm64: Use the clearbhb instruction in mitigations - [Config]: set CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY=y * CVE-2022-25636 - netfilter: nf_tables_offload: incorrect flow offload action array size * CVE-2022-0001 - x86/speculation: Merge one test in spectre_v2_user_select_mitigation() - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd - SAUCE: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE - SAUCE: x86/speculation: Add eIBRS + Retpoline options - SAUCE: Documentation/hw-vuln: Update spectre doc * Disable unprivileged BPF by default (LP: #1961338) - bpf: Add kconfig knob for disabling unpriv bpf by default - [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y [ Ubuntu: 5.4.0-100.113 ] * focal/linux: 5.4.0-100.113 -proposed tracker (LP: #1959900) * CVE-2022-22942 - SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy * CVE-2022-0330 - drm/i915: Flush TLBs before releasing backing store * Focal update: v5.4.166 upstream stable release (LP: #1957008) - netfilter: selftest: conntrack_vrf.sh: fix file permission - Linux 5.4.166 - net/packet: rx_owner_map depends on pg_vec - USB: gadget: bRequestType is a bitfield, not a enum - HID: holtek: fix mouse probing - udp: using datalen to cap ipv6 udp max gso segments - selftests: Calculate udpgso segment count without header adjustment * Focal update: v5.4.165 upstream stable release (LP: #1957007) - serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30 - ntfs: fix ntfs_test_inode and ntfs_init_locked_inode function type - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover - HID: google: add eel USB id - HID: add hid_is_usb() function to make it simpler for USB detection - HID: add USB_HID dependancy to hid-prodikeys - HID: add USB_HID dependancy to hid-chicony - HID: add USB_HID dependancy on some USB HID drivers - HID: bigbenff: prevent null pointer dereference - HID: wacom: fix problems when device is not a valid USB device - HID: check for valid USB device for many HID drivers - can: kvaser_usb: get CAN clock frequency from device - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct stats->{rx,tx}_errors counter - can: sja1000: fix use after free in ems_pcmcia_add_card() - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done - selftests: netfilter: add a vrf+conntrack testcase - vrf: don't run conntrack on vrf with !dflt qdisc - bpf: Fix the off-by-two error in range markings - ice: ignore dropped packets during init - bonding: make tx_rebalance_counter an atomic - nfp: Fix memory leak in nfp_cpp_area_cache_add() - seg6: fix the iif in the IPv6 socket control block - udp: using datalen to cap max gso segments - iavf: restore MSI state on reset - iavf: Fix reporting when setting descriptor count - IB/hfi1: Correct guard on eager buffer deallocation - mm: bdi: initialize bdi_min_ratio when bdi is unregistered - ALSA: ctl: Fix copy of updated id with element read/write - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform - ALSA: pcm: oss: Fix negative period/buffer sizes - ALSA: pcm: oss: Limit the period size to 16MB - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() - btrfs: clear extent buffer uptodate when we fail to write it - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling - nfsd: Fix nsfd startup race (again) - tracefs: Have new files inherit the ownership of their parent - clk: qcom: regmap-mux: fix parent clock lookup - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence. - can: pch_can: pch_can_rx_normal: fix use after free - can: m_can: Disable and ignore ELO interrupt - x86/sme: Explicitly map new EFI memmap table as encrypted - libata: add horkage for ASMedia 1092 - wait: add wake_up_pollfree() - SAUCE: binder: export __wake_up_pollfree for binder module - binder: use wake_up_pollfree() - signalfd: use wake_up_pollfree() - aio: keep poll requests on waitqueue until completed - aio: fix use-after-free due to missing POLLFREE handling - tracefs: Set all files to the same group ownership as the mount option - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) - qede: validate non LSO skb length - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer - i40e: Fix failed opcode appearing if handling messages from VF - i40e: Fix pre-set max number of queues for VF - mtd: rawnand: fsmc: Take instruction delay into account - mtd: rawnand: fsmc: Fix timing computation - dt-bindings: net: Reintroduce PHY no lane swap binding - tools build: Remove needless libpython-version feature check that breaks test-all fast path - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero - net: altera: set a couple error code in probe() - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() - net, neigh: clear whole pneigh_entry at alloc time - net/qla3xxx: fix an error code in ql_adapter_up() - Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for rp_filter tests" - selftests/fib_tests: Rework fib_rp_filter_test() - USB: gadget: detect too-big endpoint 0 requests - USB: gadget: zero allocate endpoint 0 buffers - usb: core: config: fix validation of wMaxPacketValue entries - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending - usb: core: config: using bit mask instead of individual bits - xhci: avoid race between disable slot command and host runtime suspend - iio: trigger: Fix reference counting - iio: trigger: stm32-timer: fix MODULE_ALIAS - iio: stk3310: Don't return error code in interrupt handler - iio: mma8452: Fix trigger reference couting - iio: ltr501: Don't return error code in trigger handler - iio: kxsd9: Don't return error code in trigger handler - iio: itg3200: Call iio_trigger_notify_done() on error - iio: dln2-adc: Fix lockdep complaint - iio: dln2: Check return value of devm_iio_trigger_register() - iio: at91-sama5d2: Fix incorrect sign extension - iio: adc: axp20x_adc: fix charging current reporting on AXP22x - iio: ad7768-1: Call iio_trigger_notify_done() on error - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL - irqchip: nvic: Fix offset for Interrupt Priority Offsets - misc: fastrpc: fix improper packet size calculation - bpf: Add selftests to cover packet access corner cases - Linux 5.4.165 * Focal update: v5.4.164 upstream stable release (LP: #1956381) - NFSv42: Fix pagecache invalidation after COPY/CLONE - of: clk: Make self-contained - arm64: dts: mcbin: support 2W SFP modules - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM - gfs2: Fix length of holes reported at end-of-file - drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY - mac80211: do not access the IV when it was stripped - net/smc: Transfer remaining wait queue entries during fallback - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait - net: return correct error code - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep - s390/setup: avoid using memblock_enforce_memory_limit - btrfs: check-integrity: fix a warning on write caching disabled disk - thermal: core: Reset previous low and high trip during thermal zone init - scsi: iscsi: Unblock session then wake up error handler - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound - net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() - perf hist: Fix memory leak of a perf_hpp_fmt - perf report: Fix memory leaks around perf_tip() - net/smc: Avoid warning of possible recursive locking - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit - kprobes: Limit max data_size of the kretprobe instances - rt2x00: do not mark device gone on EPROTO errors during start - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink() - s390/pci: move pseudo-MMIO to prevent MIO overlap - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl - i2c: stm32f7: flush TX FIFO upon transfer errors - i2c: stm32f7: recover the bus on access timeout - i2c: stm32f7: stop dma transfer in case of NACK - i2c: cbus-gpio: set atomic transfer callback - natsemi: xtensa: fix section mismatch warnings - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() - net: mpls: Fix notifications when deleting a device - siphash: use _unaligned version by default - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() - selftests: net: Correct case name - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available - net: marvell: mvpp2: Fix the computation of shared CPUs - net: annotate data-races on txq->xmit_lock_owner - ipv4: convert fib_num_tclassid_users to atomic_t - net/rds: correct socket tunable error in rds_tcp_tune() - net/smc: Keep smc_close_final rc during active close - drm/msm: Do hw_init() before capturing GPU state - ipv6: fix memory leak in fib6_rule_suppress - KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register - sched/uclamp: Fix rq->uclamp_max not set on first enqueue - parisc: Fix KBUILD_IMAGE for self-extracting kernel - parisc: Fix "make install" on newer debian releases - vgacon: Propagate console boot parameters before calling `vc_resize' - xhci: Fix commad ring abort, write all 64 bits to CRCR register. - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect - x86/tsc: Add a timer to make sure TSC_adjust is always checked - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms - x86/64/mm: Map all kernel memory into trampoline_pgd - tty: serial: msm_serial: Deactivate RX DMA for polling support - serial: pl011: Add ACPI SBSA UART match id - serial: core: fix transmit-buffer reset and memleak - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array - serial: 8250_pci: rewrite pericom_do_set_divisor() - iwlwifi: mvm: retry init flow if failed - parisc: Mark cr16 CPU clocksource unstable on all SMP machines - net/tls: Fix authentication failure in CCM mode - Linux 5.4.164 * Focal update: v5.4.163 upstream stable release (LP: #1956380) - USB: serial: option: add Telit LE910S1 0x9200 composition - USB: serial: option: add Fibocom FM101-GL variants - usb: dwc2: gadget: Fix ISOC flow for elapsed frames - usb: dwc2: hcd_queue: Fix use of floating point literal - net: nexthop: fix null pointer dereference when IPv6 is not enabled - usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts - usb: hub: Fix usb enumeration issue due to address0 race - usb: hub: Fix locking issues with address0_mutex - binder: fix test regression due to sender_euid change - ALSA: ctxfi: Fix out-of-range access - media: cec: copy sequence field for the reply - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts - staging/fbtft: Fix backlight - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() - xen: don't continue xenstore initialization in case of errors - xen: detect uninitialized xenbus in xenbus_init - KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB - tracing/uprobe: Fix uprobe_perf_open probes iteration - tracing: Fix pid filtering when triggers are attached - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB - mdio: aspeed: Fix "Link is Down" issue - PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() - PCI: aardvark: Wait for endpoint to be ready before training link - PCI: aardvark: Fix big endian support - PCI: aardvark: Train link immediately after enabling training - PCI: aardvark: Improve link training - PCI: aardvark: Issue PERST via GPIO - PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros - PCI: aardvark: Don't touch PCIe registers if no card connected - PCI: aardvark: Fix compilation on s390 - PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link() - PCI: aardvark: Update comment about disabling link training - PCI: pci-bridge-emul: Fix array overruns, improve safety - PCI: aardvark: Configure PCIe resources from 'ranges' DT property - PCI: aardvark: Fix PCIe Max Payload Size setting - PCI: aardvark: Implement re-issuing config requests on CRS response - PCI: aardvark: Simplify initialization of rootcap on virtual bridge - PCI: aardvark: Fix link training - PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge - PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge - PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge - pinctrl: armada-37xx: Correct PWM pins definitions - arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function - proc/vmcore: fix clearing user buffer by properly using clear_user() - netfilter: ipvs: Fix reuse connection if RS weight is 0 - ARM: dts: BCM5301X: Fix I2C controller interrupt - ARM: dts: BCM5301X: Add interrupt properties to GPIO node - ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls - net: ieee802154: handle iftypes as u32 - firmware: arm_scmi: pm: Propagate return value to caller - NFSv42: Don't fail clone() unless the OP_CLONE operation failed - ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE - scsi: mpt3sas: Fix kernel panic during drive powercycle test - drm/vc4: fix error code in vc4_create_object() - iavf: Prevent changing static ITR values if adaptive moderation is on - ipv6: fix typos in __ip6_finish_output() - nfp: checking parameter process for rx-usecs/tx-usecs is invalid - net: ipv6: add fib6_nh_release_dsts stub - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING - net/smc: Ensure the active closing peer first closes clcsock - nvmet-tcp: fix incomplete data digest send - net/ncsi : Add payload to be 32-bit aligned to fix dropped packets - PM: hibernate: use correct mode for swsusp_close() - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows - nvmet: use IOCB_NOWAIT only if the filesystem supports it - igb: fix netpoll exit with traffic - MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 - net: vlan: fix underflow for the real_dev refcnt - net/smc: Don't call clcsock shutdown twice when smc shutdown - net: hns3: fix VF RSS failed problem after PF enable multi-TCs - net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP - net: mscc: ocelot: correctly report the timestamping RX filters in ethtool - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found - smb3: do not error on fsync when readonly - vhost/vsock: fix incorrect used length reported to the guest - tracing: Check pid filtering when creating events - s390/mm: validate VMA in PGSTE manipulation functions - shm: extend forced shm destroy to support objects from several IPC nses - NFC: add NCI_UNREG flag to eliminate the race - fuse: release pipe buf after last use - xen: sync include/xen/interface/io/ring.h with Xen's newest version - xen/blkfront: read response from backend only once - xen/blkfront: don't take local copy of a request from the ring page - xen/blkfront: don't trust the backend response data blindly - xen/netfront: read response from backend only once - xen/netfront: don't read data from request on the ring page - xen/netfront: disentangle tx_skb_freelist - xen/netfront: don't trust the backend response data blindly - tty: hvc: replace BUG_ON() with negative return value - Linux 5.4.163 * net/mlx5e: EPERM on vlan 0 programming (LP: #1957753) - net/mlx5e: Unblock setting vid 0 for VF in case PF isn't eswitch manager * CVE-2021-4083 - fget: check that the fd still exists after getting a ref to it * CVE-2021-4155 - xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate [ Ubuntu: 5.4.0-99.112 ] * focal/linux: 5.4.0-99.112 -proposed tracker (LP: #1959817) * linux-image-5.4.0-97.110 freezes by accessing cifs shares (LP: #1959665) - Revert "cifs: To match file servers, make sure the server hostname matches" - Revert "cifs: set a minimum of 120s for next dns resolution" - Revert "cifs: use the expiry output of dns_query to schedule next resolution" [ Ubuntu: 5.4.0-97.110 ] * icmp_redirect from selftests fails on F/kvm (unary operator expected) (LP: #1938964) - selftests: icmp_redirect: pass xfail=0 to log_test() * Focal: CIFS stable updates (LP: #1954926) - cifs: use the expiry output of dns_query to schedule next resolution - cifs: set a minimum of 120s for next dns resolution - cifs: To match file servers, make sure the server hostname matches * seccomp_bpf in seccomp from ubuntu_kernel_selftests failed to build on B-5.4 (LP: #1896420) - SAUCE: selftests/seccomp: fix "storage size of 'md' isn't known" build issue - SAUCE: selftests/seccomp: Fix s390x regs not defined issue * system crash when removing ipmi_msghandler module (LP: #1950666) - ipmi: Move remove_work to dedicated workqueue - ipmi: msghandler: Make symbol 'remove_work_wq' static * zcrypt DD: Toleration for new IBM Z Crypto Hardware - (Backport to Ubuntu 20.04) (LP: #1954680) - s390/AP: support new dynamic AP bus size limit * [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel - kernel part (LP: #1953334) - s390/setup: diag 318: refactor struct - s390/kvm: diagnose 0x318 sync and reset - KVM: s390: remove diag318 reset code - KVM: s390: add debug statement for diag 318 CPNC data * Updates to ib_peer_memory requested by Nvidia (LP: #1947206) - SAUCE: RDMA/core: Updated ib_peer_memory * Include Infiniband Peer Memory interface (LP: #1923104) - IB: Allow calls to ib_umem_get from kernel ULPs - SAUCE: RDMA/core: Introduce peer memory interface * Focal update: v5.4.162 upstream stable release (LP: #1954834) - arm64: zynqmp: Do not duplicate flash partition label property - arm64: zynqmp: Fix serial compatible string - ARM: dts: NSP: Fix mpcore, mmc node names - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() - arm64: dts: hisilicon: fix arm,sp805 compatible string - RDMA/bnxt_re: Check if the vlan is valid before reporting - usb: musb: tusb6010: check return value after calling platform_get_resource() - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read - arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency - arm64: dts: freescale: fix arm,sp805 compatible string - ASoC: SOF: Intel: hda-dai: fix potential locking issue - clk: imx: imx6ul: Move csi_sel mux to correct base register - ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect - scsi: advansys: Fix kernel pointer leak - firmware_loader: fix pre-allocated buf built-in firmware use - ARM: dts: omap: fix gpmc,mux-add-data type - usb: host: ohci-tmio: check return value after calling platform_get_resource() - ARM: dts: ls1021a: move thermal-zones node out of soc/ - ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash - ALSA: ISA: not for M68K - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc - MIPS: sni: Fix the build - scsi: target: Fix ordered tag handling - scsi: target: Fix alua_tg_pt_gps_count tracking - iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() - powerpc/5200: dts: fix memory node unit name - ALSA: gus: fix null pointer dereference on pointer block - powerpc/dcr: Use cmplwi instead of 3-argument cmpli - sh: check return code of request_irq - maple: fix wrong return value of maple_bus_init(). - f2fs: fix up f2fs_lookup tracepoints - sh: fix kconfig unmet dependency warning for FRAME_POINTER - sh: math-emu: drop unused functions - sh: define __BIG_ENDIAN for math-emu - clk: ingenic: Fix bugs with divided dividers - clk/ast2600: Fix soc revision for AHB - clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk - mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() - tracing: Save normal string variables - tracing/histogram: Do not copy the fixed-size char array field over the field size - RDMA/netlink: Add __maybe_unused to static inline in C file - perf bpf: Avoid memory leak from perf_env__insert_btf() - perf bench futex: Fix memory leak of perf_cpu_map__new() - perf tests: Remove bash construct from record+zstd_comp_decomp.sh - net: bnx2x: fix variable dereferenced before check - iavf: check for null in iavf_fix_features - iavf: free q_vectors before queues in iavf_disable_vf - iavf: Fix failure to exit out from last all-multicast mode - iavf: prevent accidental free of filter structure - iavf: validate pointers - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset - MIPS: generic/yamon-dt: fix uninitialized variable error - mips: bcm63xx: add support for clk_get_parent() - mips: lantiq: add support for clk_get_parent() - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' - scsi: core: sysfs: Fix hang when device state is set via sysfs - net: sched: act_mirred: drop dst for the direction from egress to ingress - net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove - net: virtio_net_hdr_to_skb: count transport header in UFO - i40e: Fix correct max_pkt_size on VF RX queue - i40e: Fix NULL ptr dereference on VSI filter sync - i40e: Fix changing previously set num_queue_pairs for PFs - i40e: Fix ping is lost after configuring ADq on VF - i40e: Fix creation of first queue by omitting it if is not power of two - i40e: Fix display error code in dmesg - NFC: reorganize the functions in nci_request - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame - NFC: reorder the logic in nfc_{un,}register_device - KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server - s390/kexec: fix return code handling - arm64: vdso32: suppress error message for 'make mrproper' - tun: fix bonding active backup with arp monitoring - hexagon: export raw I/O routines for modules - ipc: WARN if trying to remove ipc object which is absent - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails - s390/kexec: fix memory leak of ipl report buffer - udf: Fix crash after seekdir - btrfs: fix memory ordering between normal and ordered work functions - parisc/sticon: fix reverse colors - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type - drm/udl: fix control-message timeout - drm/nouveau: use drm_dev_unplug() during device removal - drm/i915/dp: Ensure sink rate values are always valid - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors - Revert "net: mvpp2: disable force link UP during port init procedure" - perf/core: Avoid put_page() when GUP fails - batman-adv: Consider fragmentation for needed_headroom - batman-adv: Reserve needed_*room for fragments - batman-adv: Don't always reallocate the fragmentation skb head - ASoC: DAPM: Cover regression by kctl change notification fix - usb: max-3421: Use driver data instead of maintaining a list of bound devices - ice: Delete always true check of PF pointer - ALSA: hda: hdac_ext_stream: fix potential locking issues - ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() - Linux 5.4.162 * Focal update: v5.4.161 upstream stable release (LP: #1954828) - scsi: ufs: Fix interrupt error message for shared interrupts - MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL - ext4: fix lazy initialization next schedule time computation in more granular unit - scsi: ufs: Fix tm request when non-fatal error happens - fortify: Explicitly disable Clang support - parisc/entry: fix trace test in syscall exit path - PCI/MSI: Destroy sysfs before freeing entries - PCI/MSI: Deal with devices lying about their MSI mask capability - PCI: Add MSI masking quirk for Nvidia ION AHCI - erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() - erofs: fix unsafe pagevec reuse of hooked pclusters - Linux 5.4.161 * Focal update: v5.4.160 upstream stable release (LP: #1953387) - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay - usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform - binder: use euid from cred instead of using task - binder: use cred instead of task for selinux checks - binder: use cred instead of task for getsecid - Input: iforce - fix control-message timeout - Input: elantench - fix misreporting trackpoint coordinates - Input: i8042 - Add quirk for Fujitsu Lifebook T725 - libata: fix read log timeout value - ocfs2: fix data corruption on truncate - scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file - scsi: qla2xxx: Fix use after free in eh_abort path - mmc: dw_mmc: Dont wait for DRTO on Write RSP error - parisc: Fix ptrace check on syscall return - tpm: Check for integer overflow in tpm2_map_response_body() - firmware/psci: fix application of sizeof to pointer - crypto: s5p-sss - Add error handling in s5p_aes_probe() - media: ite-cir: IR receiver stop working after receive overflow - media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers - media: v4l2-ioctl: Fix check_ext_ctrls - ALSA: hda/realtek: Add quirk for Clevo PC70HS - ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N - ALSA: hda/realtek: Add quirk for ASUS UX550VE - ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED - ALSA: ua101: fix division by zero at probe - ALSA: 6fire: fix control and bulk message timeouts - ALSA: line6: fix control and interrupt message timeouts - ALSA: usb-audio: Add registration quirk for JBL Quantum 400 - ALSA: synth: missing check for possible NULL after the call to kstrdup - ALSA: timer: Fix use-after-free problem - ALSA: timer: Unconditionally unlink slave instances, too - fuse: fix page stealing - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL - x86/irq: Ensure PI wakeup handler is unregistered before module unload - cavium: Return negative value when pci_alloc_irq_vectors() fails - scsi: qla2xxx: Return -ENOMEM if kzalloc() fails - scsi: qla2xxx: Fix unmap of already freed sgl - cavium: Fix return values of the probe function - sfc: Don't use netif_info before net_device setup - hyperv/vmbus: include linux/bitops.h - ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode - reset: socfpga: add empty driver allowing consumers to probe - mmc: winbond: don't build on M68K - drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT - bpf: Prevent increasing bpf_jit_limit above max - xen/netfront: stop tx queues during live migration - nvmet-tcp: fix a memory leak when releasing a queue - spi: spl022: fix Microwire full duplex mode - net: multicast: calculate csum of looped-back and forwarded packets - watchdog: Fix OMAP watchdog early handling - drm: panel-orientation-quirks: Add quirk for GPD Win3 - nvmet-tcp: fix header digest verification - r8169: Add device 10ec:8162 to driver r8169 - vmxnet3: do not stop tx queues after netif_device_detach() - nfp: bpf: relax prog rejection for mtu check through max_pkt_offset - net/smc: Correct spelling mistake to TCPF_SYN_RECV - btrfs: clear MISSING device status bit in btrfs_close_one_device - btrfs: fix lost error handling when replaying directory deletes - btrfs: call btrfs_check_rw_degradable only if there is a missing device - ia64: kprobes: Fix to pass correct trampoline address to the handler - hwmon: (pmbus/lm25066) Add offset coefficients - regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled - regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default- dvs-idx property - EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell - mwifiex: fix division by zero in fw download path - ath6kl: fix division by zero in send path - ath6kl: fix control-message timeout - ath10k: fix control-message timeout - ath10k: fix division by zero in send path - PCI: Mark Atheros QCA6174 to avoid bus reset - rtl8187: fix control-message timeouts - evm: mark evm_fixmode as __ro_after_init - wcn36xx: Fix HT40 capability for 2Ghz band - mwifiex: Read a PCI register after writing the TX ring write pointer - libata: fix checking of DMA state - wcn36xx: handle connection loss indication - rsi: fix occasional initialisation failure with BT coex - rsi: fix key enabled check causing unwanted encryption for vap_id > 0 - rsi: fix rate mask set leading to P2P failure - rsi: Fix module dev_oper_mode parameter description - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP - signal: Remove the bogus sigkill_pending in ptrace_stop - signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT - power: supply: max17042_battery: Prevent int underflow in set_soc_threshold - power: supply: max17042_battery: use VFSOC for capacity when no rsns - KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use - can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport - can: j1939: j1939_can_recv(): ignore messages with invalid source address - powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found - serial: core: Fix initializing and restoring termios speed - ALSA: mixer: oss: Fix racy access to slots - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume - xen/balloon: add late_initcall_sync() for initial ballooning done - PCI: pci-bridge-emul: Fix emulation of W1C bits - PCI: aardvark: Do not clear status bits of masked interrupts - PCI: aardvark: Fix checking for link up via LTSSM state - PCI: aardvark: Do not unmask unused interrupts - PCI: aardvark: Fix reporting Data Link Layer Link Active - PCI: aardvark: Fix return value of MSI domain .alloc() method - PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG - quota: check block number when reading the block in quota file - quota: correct error number in free_dqentry() - pinctrl: core: fix possible memory leak in pinctrl_enable() - iio: dac: ad5446: Fix ad5622_write() return value - USB: serial: keyspan: fix memleak on probe errors - USB: iowarrior: fix control-message timeouts - USB: chipidea: fix interrupt deadlock - dma-buf: WARN on dmabuf release with pending attachments - drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) - drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 - drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() - Bluetooth: fix use-after-free error in lock_sock_nested() - drm/panel-orientation-quirks: add Valve Steam Deck - platform/x86: wmi: do not fail if disabling fails - MIPS: lantiq: dma: add small delay after reset - MIPS: lantiq: dma: reset correct number of channel - locking/lockdep: Avoid RCU-induced noinstr fail - net: sched: update default qdisc visibility after Tx queue cnt changes - smackfs: Fix use-after-free in netlbl_catmap_walk() - x86: Increase exception stack sizes - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type - mwifiex: Properly initialize private structure on interface type changes - ath10k: high latency fixes for beacon buffer - media: mt9p031: Fix corrupted frame after restarting stream - media: netup_unidvb: handle interrupt properly according to the firmware - media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() - media: uvcvideo: Set capability in s_param - media: uvcvideo: Return -EIO for control errors - media: uvcvideo: Set unique vdev name based in type - media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() - media: s5p-mfc: Add checking to s5p_mfc_probe(). - media: imx: set a media_device bus_info string - media: mceusb: return without resubmitting URB in case of -EPROTO error. - ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK - brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet - media: rcar-csi2: Add checking to rcsi2_start_receiver() - ipmi: Disable some operations during a panic - ACPICA: Avoid evaluating methods too early during system resume - media: ipu3-imgu: imgu_fmt: Handle properly try - media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() - net-sysfs: try not to restart the syscall if it will fail eventually - tracefs: Have tracefs directories not set OTH permission bits by default - ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() - iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value - ACPI: battery: Accept charges over the design capacity as full - leaking_addresses: Always print a trailing newline - memstick: r592: Fix a UAF bug when removing the driver - lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression - lib/xz: Validate the value before assigning it to an enum variable - workqueue: make sysfs of unbound kworker cpumask more clever - tracing/cfi: Fix cmp_entries_* functions signature mismatch - mwl8k: Fix use-after-free in mwl8k_fw_state_machine() - block: remove inaccurate requeue check - nvmet: fix use-after-free when a port is removed - nvmet-tcp: fix use-after-free when a port is removed - nvme: drop scan_lock and always kick requeue list when removing namespaces - PM: hibernate: Get block device exclusively in swsusp_check() - selftests: kvm: fix mismatched fclose() after popen() - iwlwifi: mvm: disable RX-diversity in powersave - smackfs: use __GFP_NOFAIL for smk_cipso_doi() - ARM: clang: Do not rely on lr register for stacktrace - gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE - ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 - vrf: run conntrack only in context of lower/physdev for locally generated packets - net: annotate data-race in neigh_output() - btrfs: do not take the uuid_mutex in btrfs_rm_device - spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() - x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted - parisc: fix warning in flush_tlb_all - task_stack: Fix end_of_stack() for architectures with upwards-growing stack - parisc/unwind: fix unwinder when CONFIG_64BIT is enabled - parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling - netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state - selftests/bpf: Fix strobemeta selftest regression - Bluetooth: fix init and cleanup of sco_conn.timeout_work - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() - drm/v3d: fix wait for TMU write combiner flush - virtio-gpu: fix possible memory allocation failure - net: net_namespace: Fix undefined member in key_remove_domain() - cgroup: Make rebind_subsystems() disable v2 controllers all at once - wilc1000: fix possible memory leak in cfg_scan_result() - Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync - crypto: caam - disable pkc for non-E SoCs - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() - net: dsa: rtl8366rb: Fix off-by-one bug - ath10k: Fix missing frame timestamp for beacon/probe-resp - drm/amdgpu: fix warning for overflow check - media: em28xx: add missing em28xx_close_extension - media: cxd2880-spi: Fix a null pointer dereference on error handling path - media: dvb-usb: fix ununit-value in az6027_rc_query - media: TDA1997x: handle short reads of hdmi info frame. - media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' - media: radio-wl1273: Avoid card name truncation - media: si470x: Avoid card name truncation - media: tm6000: Avoid card name truncation - media: cx23885: Fix snd_card_free call on null card pointer - kprobes: Do not use local variable when creating debugfs file - crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency - cpuidle: Fix kobject memory leaks in error paths - media: em28xx: Don't use ops->suspend if it is NULL - ath9k: Fix potential interrupt storm on queue reset - EDAC/amd64: Handle three rank interleaving mode - netfilter: nft_dynset: relax superfluous check on set updates - media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() - crypto: qat - detect PFVF collision after ACK - crypto: qat - disregard spurious PFVF interrupts - hwrng: mtk - Force runtime pm ops for sleep ops - b43legacy: fix a lower bounds test - b43: fix a lower bounds test - mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured - memstick: avoid out-of-range warning - memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() - net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE - hwmon: Fix possible memleak in __hwmon_device_register() - hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff - ath10k: fix max antenna gain unit - drm/msm: uninitialized variable in msm_gem_import() - net: stream: don't purge sk_error_queue in sk_stream_kill_queues() - mmc: mxs-mmc: disable regulator on error and in the remove function - block: ataflop: fix breakage introduced at blk-mq refactoring - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning - mt76: mt76x02: fix endianness warnings in mt76x02_mac.c - rsi: stop thread firstly in rsi_91x_init() error handling - mwifiex: Send DELBA requests according to spec - phy: micrel: ksz8041nl: do not use power down mode - nvme-rdma: fix error code in nvme_rdma_setup_ctrl - PM: hibernate: fix sparse warnings - clocksource/drivers/timer-ti-dm: Select TIMER_OF - drm/msm: Fix potential NULL dereference in DPU SSPP - smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi - libbpf: Fix BTF data layout checks and allow empty BTF - s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() - irq: mips: avoid nested irq_enter() - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() - samples/kretprobes: Fix return value if register_kretprobe() failed - KVM: s390: Fix handle_sske page fault handling - libertas_tf: Fix possible memory leak in probe and disconnect - libertas: Fix possible memory leak in probe and disconnect - wcn36xx: add proper DMA memory barriers in rx path - drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits - net: amd-xgbe: Toggle PLL settings during rate change - net: phylink: avoid mvneta warning when setting pause parameters - crypto: pcrypt - Delay write to padata->info - selftests/bpf: Fix fclose/pclose mismatch in test_progs - udp6: allow SO_MARK ctrl msg to affect routing - ibmvnic: don't stop queue in xmit - ibmvnic: Process crqs after enabling interrupts - RDMA/rxe: Fix wrong port_cap_flags - clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths - ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() - arm64: dts: rockchip: Fix GPU register width for RK3328 - ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY - RDMA/bnxt_re: Fix query SRQ failure - arm64: dts: meson-g12a: Fix the pwm regulator supply properties - ARM: dts: at91: tse850: the emac<->phy interface is rmii - scsi: dc395: Fix error case unwinding - MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT - JFS: fix memleak in jfs_mount - ALSA: hda: Reduce udelay() at SKL+ position reporting - arm: dts: omap3-gta04a4: accelerometer irq fix - soc/tegra: Fix an error handling path in tegra_powergate_power_up() - memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe - clk: at91: check pmc node status before registering syscore ops - video: fbdev: chipsfb: use memset_io() instead of memset() - serial: 8250_dw: Drop wrong use of ACPI_PTR() - usb: gadget: hid: fix error code in do_config() - power: supply: rt5033_battery: Change voltage values to µV - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() - RDMA/mlx4: Return missed an error if device doesn't support steering - staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC - ARM: dts: stm32: fix SAI sub nodes register range - ASoC: cs42l42: Correct some register default values - ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER - phy: qcom-qusb2: Fix a memory leak on probe - serial: xilinx_uartps: Fix race condition causing stuck TX - HID: u2fzero: clarify error check and length calculations - HID: u2fzero: properly handle timeouts in usb_submit_urb - powerpc/44x/fsp2: add missing of_node_put - mips: cm: Convert to bitfield API to fix out-of-bounds access - power: supply: bq27xxx: Fix kernel crash on IRQ handler register error - apparmor: fix error check - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds - drm/plane-helper: fix uninitialized variable reference - PCI: aardvark: Don't spam about PIO Response Status - PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge - opp: Fix return in _opp_add_static_v2() - NFS: Fix deadlocks in nfs_scan_commit_list() - fs: orangefs: fix error return code of orangefs_revalidate_lookup() - mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() - mtd: core: don't remove debugfs directory if device is in use - dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro - auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string - auxdisplay: ht16k33: Connect backlight to fbdev - auxdisplay: ht16k33: Fix frame buffer device blanking - soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read - netfilter: nfnetlink_queue: fix OOB when mac header was cleared - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` - signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) - m68k: set a default value for MEMORY_RESERVE - watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT - ar7: fix kernel builds for compiler test - scsi: qla2xxx: Fix gnl list corruption - scsi: qla2xxx: Turn off target reset during issue_lip - NFSv4: Fix a regression in nfs_set_open_stateid_locked() - i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' - xen-pciback: Fix return in pm_ctrl_init() - net: davinci_emac: Fix interrupt pacing disable - net: vlan: fix a UAF in vlan_dev_real_dev() - ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() - zram: off by one in read_block_state() - perf bpf: Add missing free to bpf_event__print_bpf_prog_info() - llc: fix out-of-bound array index in llc_sk_dev_hash() - nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails - arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions - bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding - net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any - net: hns3: allow configure ETS bandwidth of all TCs - vsock: prevent unnecessary refcnt inc for nonblocking connect - net/smc: fix sk_refcnt underflow on linkdown and fallback - cxgb4: fix eeprom len when diagnostics not implemented - selftests/net: udpgso_bench_rx: fix port argument - ARM: 9155/1: fix early early_iounmap() - ARM: 9156/1: drop cc-option fallbacks for architecture selection - parisc: Fix set_fixmap() on PA1.x CPUs - irqchip/sifive-plic: Fixup EOI failed when masked - f2fs: should use GFP_NOFS for directory inodes - net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE - 9p/net: fix missing error check in p9_check_errors - ovl: fix deadlock in splice write - powerpc/lib: Add helper to check if offset is within conditional branch range - powerpc/bpf: Validate branch ranges - powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 - powerpc/security: Add a helper to query stf_barrier type - powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks - mm, oom: do not trigger out_of_memory from the #PF - video: backlight: Drop maximum brightness override for brightness zero - s390/cio: check the subchannel validity for dev_busid - s390/tape: fix timer initialization in tape_std_assign() - s390/cio: make ccw_device_dma_* more robust - powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros - SUNRPC: Partial revert of commit 6f9f17287e78 - ath10k: fix invalid dma_addr_t token assignment - selftests/bpf: Fix also no-alu32 strobemeta selftest - Linux 5.4.160 - soc/tegra: pmc: Fix imbalanced clock disabling in error code path * Focal update: v5.4.159 upstream stable release (LP: #1953071) - Revert "x86/kvm: fix vcpu-id indexed array sizes" - usb: ehci: handshake CMD_RUN instead of STS_HALT - usb: gadget: Mark USB_FSL_QE broken on 64-bit - usb: musb: Balance list entry in musb_gadget_queue - usb-storage: Add compatibility quirk flags for iODD 2531/2541 - binder: don't detect sender/target during buffer cleanup - printk/console: Allow to disable console output by using console="" or console=null - isofs: Fix out of bound access for corrupted isofs image - comedi: dt9812: fix DMA buffers on stack - comedi: ni_usb6501: fix NULL-deref in command paths - comedi: vmk80xx: fix transfer-buffer overflows - comedi: vmk80xx: fix bulk-buffer overflow - comedi: vmk80xx: fix bulk and interrupt message timeouts - staging: r8712u: fix control-message timeout - staging: rtl8192u: fix control-message timeouts - media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init - rsi: fix control-message timeout - Linux 5.4.159 * Focal update: v5.4.158 upstream stable release (LP: #1953066) - scsi: core: Put LLD module refcnt after SCSI device is released - vrf: Revert "Reset skb conntrack connection..." - net: ethernet: microchip: lan743x: Fix skb allocation failure - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() - Revert "xhci: Set HCD flag to defer primary roothub registration" - Revert "usb: core: hcd: Add support for deferring roothub registration" - sfc: Fix reading non-legacy supported link modes - ARM: 9120/1: Revert "amba: make use of -1 IRQs warn" - Linux 5.4.158 * [Ubuntu 20.04] Problem leading IUCV service down (on s390x) (LP: #1913442) - usercopy: mark dma-kmalloc caches as usercopy caches [ Ubuntu: 5.4.0-96.109 ] * Support builtin revoked certificates (LP: #1932029) - [Config]: add i386 to CONFIG_SYSTEM_REVOCATION_KEYS annotation * CVE-2022-0185 - SAUCE: vfs: Out-of-bounds write of heap buffer in fs_context.c - SAUCE: vfs: test that one given mount param is not larger than PAGE_SIZE [ Ubuntu: 5.4.0-94.106 ] * focal/linux: 5.4.0-94.106 -proposed tracker (LP: #1956628) * [Regression] Focal kernel 5.4.0-92.103 fails to boot when Secure Encrypted Virtualization(SEV) is enabled (LP: #1956575) - x86/ioremap: Map EFI-reserved memory as encrypted for SEV [ Ubuntu: 5.4.0-92.103 ] * focal/linux: 5.4.0-92.103 -proposed tracker (LP: #1952316) * Packaging resync (LP: #1786013) - [Packaging] resync update-dkms-versions helper - debian/dkms-versions -- update from kernel-versions (main/2021.11.29) * CVE-2021-4002 - tlb: mmu_gather: add tlb_flush_*_range APIs - hugetlbfs: flush TLBs correctly after huge_pmd_unshare * Re-enable DEBUG_INFO_BTF where it was disabled (LP: #1945632) - [Config] Enable CONFIG_DEBUG_INFO_BTF on all arches * Focal linux-azure: Vm crash on Dv5/Ev5 (LP: #1950462) - KVM: VMX: eVMCS: make evmcs_sanitize_exec_ctrls() work again - jump_label: Fix usage in module __init * Support builtin revoked certificates (LP: #1932029) - Revert "UBUNTU: SAUCE: (lockdown) Make get_cert_list() not complain about cert lists that aren't present." - integrity: Move import of MokListRT certs to a separate routine - integrity: Load certs from the EFI MOK config table - certs: Add ability to preload revocation certs - integrity: Load mokx variables into the blacklist keyring - certs: add 'x509_revocation_list' to gitignore - SAUCE: Dump stack when X.509 certificates cannot be loaded - [Packaging] build canonical-revoked-certs.pem from branch/arch certs - [Packaging] Revoke 2012 UEFI signing certificate as built-in - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys * Support importing mokx keys into revocation list from the mok table (LP: #1928679) - efi: Support for MOK variable config table - efi: mokvar-table: fix some issues in new code - efi: mokvar: add missing include of asm/early_ioremap.h - efi/mokvar: Reserve the table only if it is in boot services data - SAUCE: integrity: add informational messages when revoking certs * Support importing mokx keys into revocation list from the mok table (LP: #1928679) // CVE-2020-26541 when certificates are revoked via MokListXRT. - SAUCE: integrity: Load mokx certs from the EFI MOK config table * Focal update: v5.4.157 upstream stable release (LP: #1951883) - ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned - ARM: 9134/1: remove duplicate memcpy() definition - ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype - ARM: 9141/1: only warn about XIP address when not compile testing - ipv6: use siphash in rt6_exception_hash() - ipv4: use siphash instead of Jenkins in fnhe_hashfun() - usbnet: sanity check for maxpacket - usbnet: fix error return code in usbnet_probe() - Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode" - ata: sata_mv: Fix the error handling of mv_chip_id() - nfc: port100: fix using -ERRNO as command type mask - net/tls: Fix flipped sign in tls_err_abort() calls - mmc: vub300: fix control-message timeouts - mmc: cqhci: clear HALT state after CQE enable - mmc: dw_mmc: exynos: fix the finding clock sample value - mmc: sdhci: Map more voltage level to SDHCI_POWER_330 - mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() - net: lan78xx: fix division by zero in send path - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields - IB/hfi1: Fix abba locking issue with sc_disable() - nvmet-tcp: fix data digest pointer calculation - nvme-tcp: fix data digest pointer calculation - RDMA/mlx5: Set user priority for DCT - arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node - regmap: Fix possible double-free in regcache_rbtree_exit() - net: batman-adv: fix error handling - net: Prevent infinite while loop in skb_tx_hash() - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string - nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails - net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent - net: nxp: lpc_eth.c: avoid hang when bringing interface down - net/tls: Fix flipped sign in async_wait.err assignment - phy: phy_ethtool_ksettings_get: Lock the phy for consistency - phy: phy_start_aneg: Add an unlocked version - sctp: use init_tag from inithdr for ABORT chunk - sctp: fix the processing for INIT_ACK chunk - sctp: fix the processing for COOKIE_ECHO chunk - sctp: add vtag check in sctp_sf_violation - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa - sctp: add vtag check in sctp_sf_ootb - net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT - cfg80211: correct bridge/4addr mode check - KVM: s390: clear kicked_mask before sleeping again - KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu - perf script: Check session->header.env.arch before using it - Linux 5.4.157 * keyboard not working on Medion notebook s17 series (LP: #1950536) - ACPI: resources: Add one more Medion model in IRQ override quirk * creat09 from ubuntu_ltp_syscalls and cve-2018-13405 from ubuntu_ltp/cve failed with XFS (LP: #1950239) - xfs: ensure that the inode uid/gid match values match the icdinode ones - xfs: merge the projid fields in struct xfs_icdinode - xfs: remove the icdinode di_uid/di_gid members - xfs: fix up non-directory creation in SGID directories * reuseport_bpf_numa in net from ubuntu_kernel_selftests fails on ppc64le (LP: #1867570) - selftests/net: Fix reuseport_bpf_numa by skipping unavailable nodes * Focal update: v5.4.156 upstream stable release (LP: #1951295) - parisc: math-emu: Fix fall-through warnings - net: switchdev: do not propagate bridge updates across bridges - tee: optee: Fix missing devices unregister during optee_remove - ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default - xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF - xtensa: xtfpga: Try software restart before simulating CPU reset - NFSD: Keep existing listeners on portlist error - dma-debug: fix sg checks in debug_dma_map_sg() - ASoC: wm8960: Fix clock configuration on slave mode - netfilter: ipvs: make global sysctl readonly in non-init netns - lan78xx: select CRC32 - net: dsa: lantiq_gswip: fix register definition - NIOS2: irqflags: rename a redefined register name - net: hns3: reset DWRR of unused tc to zero - net: hns3: add limit ets dwrr bandwidth cannot be 0 - net: hns3: disable sriov before unload hclge layer - net: stmmac: Fix E2E delay mechanism - net: enetc: fix ethtool counter name for PM0_TERR - can: rcar_can: fix suspend/resume - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification - can: peak_pci: peak_pci_remove(): fix UAF - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes - ceph: fix handling of "meta" errors - ocfs2: fix data corruption after conversion from inline format - ocfs2: mount fails with buffer overflow in strlen - elfcore: correct reference to CONFIG_UML - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset - ALSA: hda/realtek: Add quirk for Clevo PC50HS - ASoC: DAPM: Fix missing kctl change notifications - audit: fix possible null-pointer dereference in audit_filter_rules - powerpc64/idle: Fix SP offsets when saving GPRs - KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() - KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest - powerpc/idle: Don't corrupt back chain when going idle - mm, slub: fix mismatch between reconstructed freelist depth and cnt - mm, slub: fix potential memoryleak in kmem_cache_open() - nfc: nci: fix the UAF of rf_conn_info object - isdn: cpai: check ctr->cnr to avoid array index out of bound - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option - selftests: netfilter: remove stray bash debug line - gcc-plugins/structleak: add makefile var for disabling structleak - btrfs: deal with errors when checking if a dir entry exists during log replay - net: stmmac: add support for dwmac 3.40a - ARM: dts: spear3xx: Fix gmac node - isdn: mISDN: Fix sleeping function called from invalid context - platform/x86: intel_scu_ipc: Update timeout value in comment - ALSA: hda: avoid write to STATESTS if controller is in reset - Input: snvs_pwrkey - add clk handling - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() - tracing: Have all levels of checks prevent recursion - ARM: 9122/1: select HAVE_FUTEX_CMPXCHG - pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() - Linux 5.4.156 * ubuntu_ltp / finit_module02 fails on v4.15 and other kernels (LP: #1950644) // Focal update: v5.4.156 upstream stable release (LP: #1951295) - vfs: check fd has read access in kernel_read_file_from_fd() * Focal update: v5.4.155 upstream stable release (LP: #1951291) - ovl: simplify file splice - ALSA: usb-audio: Add quirk for VF0770 - ALSA: seq: Fix a potential UAF by wrong private_free call order - ALSA: hda/realtek: Complete partial device name to avoid ambiguity - ALSA: hda/realtek: Add quirk for Clevo X170KM-G - ALSA: hda/realtek - ALC236 headset MIC recording issue - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW - nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^' - s390: fix strrchr() implementation - csky: don't let sigreturn play with priveleged bits of status register - csky: Fixup regs.sr broken in ptrace - btrfs: unlock newly allocated extent buffer after error - btrfs: deal with errors when replaying dir entry during log replay - btrfs: deal with errors when adding inode reference during log replay - btrfs: check for error when looking up inode during dir entry replay - watchdog: orion: use 0 for unset heartbeat - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails - mei: me: add Ice Lake-N device id. - xhci: guard accesses to ep_state in xhci_endpoint_reset() - xhci: Fix command ring pointer corruption while aborting a command - xhci: Enable trust tx length quirk for Fresco FL11 USB controller - cb710: avoid NULL pointer subtraction - efi/cper: use stack buffer for error record decoding - efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() - usb: musb: dsps: Fix the probe error path - Input: xpad - add support for another USB ID of Nacon GC-100 - USB: serial: qcserial: add EM9191 QDL support - USB: serial: option: add Quectel EC200S-CN module support - USB: serial: option: add Telit LE910Cx composition 0x1204 - USB: serial: option: add prod. id for Quectel EG91 - EDAC/armada-xp: Fix output of uncorrectable error counter - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells - x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically - powerpc/xive: Discard disabled interrupts in get_irqchip_state() - iio: adc: aspeed: set driver data when adc probe. - iio: adc128s052: Fix the error handling path of 'adc128_probe()' - iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED - iio: light: opt3001: Fixed timeout error when 0 lux - iio: ssp_sensors: add more range checking in ssp_parse_dataframe() - iio: ssp_sensors: fix error code in ssp_print_mcu_debug() - iio: dac: ti-dac5571: fix an error code in probe() - sctp: account stream padding length for reconf chunk - gpio: pca953x: Improve bias setting - net: arc: select CRC32 - net: korina: select CRC32 - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp - net: stmmac: fix get_hw_feature() on old hardware - net: encx24j600: check error in devm_regmap_init_encx24j600 - ethernet: s2io: fix setting mac address during resume - nfc: fix error handling of nfc_proto_register() - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() - pata_legacy: fix a couple uninitialized variable bugs - ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() - mlxsw: thermal: Fix out-of-bounds memory accesses - platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call - drm/panel: olimex-lcd-olinuxino: select CRC32 - drm/msm: Fix null pointer dereference on pointer edp - drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() - drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling - acpi/arm64: fix next_platform_timer() section mismatch error - mqprio: Correct stats in mqprio_dump_class_stats(). - qed: Fix missing error code in qed_slowpath_start() - r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 - ionic: don't remove netdev->dev_addr when syncing uc list - Linux 5.4.155 * [UBUNTU 20.04] kernel: unable to read partitions on virtio-block dasd (kvm) (LP: #1950144) // Focal update: v5.4.155 upstream stable release (LP: #1951291) - virtio: write back F_VERSION_1 before validate * Focal update: v5.4.154 upstream stable release (LP: #1951288) - net: phy: bcm7xxx: Fixed indirect MMD operations - ext4: correct the error path of ext4_write_inline_data_end() - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS - netfilter: ip6_tables: zero-initialize fragment offset - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic - netfilter: nf_nat_masquerade: defer conntrack walk to work queue - mac80211: Drop frames from invalid MAC address in ad-hoc mode - m68k: Handle arrivals of multiple signals correctly - net: prevent user from passing illegal stab size - mac80211: check return value of rhashtable_init - net: sun: SUNVNET_COMMON should depend on INET - drm/amdgpu: fix gart.bo pin_count leak - scsi: ses: Fix unsigned comparison with less than zero - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" - sched: Always inline is_percpu_thread() - Linux 5.4.154 * Focal update: v5.4.153 upstream stable release (LP: #1950014) - Partially revert "usb: Kconfig: using select for USB_COMMON dependency" - USB: cdc-acm: fix racy tty buffer accesses - USB: cdc-acm: fix break reporting - usb: typec: tcpm: handle SRC_STARTUP state if cc changes - xen/privcmd: fix error handling in mmap-resource processing - mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk - ovl: fix missing negative dentry check in ovl_rename() - nfsd: fix error handling of register_pernet_subsys() in init_nfsd() - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero - xen/balloon: fix cancelled balloon action - ARM: dts: omap3430-sdp: Fix NAND device node - ARM: dts: qcom: apq8064: use compatible which contains chipid - MIPS: BPF: Restore MIPS32 cBPF JIT - bpf, mips: Validate conditional branch offsets - soc: qcom: socinfo: Fixed argument passed to platform_set_data() - ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference - soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment - ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo - ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo - arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding - xtensa: move XCHAL_KIO_* definitions to kmem_layout.h - xtensa: use CONFIG_USE_OF instead of CONFIG_OF - xtensa: call irqchip_init only when CONFIG_USE_OF is selected - bpf, arm: Fix register clobbering in div/mod implementation - bpf: Fix integer overflow in prealloc_elems_and_freelist() - phy: mdio: fix memory leak - net_sched: fix NULL deref in fifo_set_limit() - powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 - ptp_pch: Load module automatically if ID matches - arm64: dts: freescale: Fix SP805 clock-names - arm64: dts: ls1028a: add missing CAN nodes - ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() - net/sched: sch_taprio: properly cancel timer from taprio_destroy() - net: sfp: Fix typo in state machine debug string - netlink: annotate data races around nlk->bound - bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 - video: fbdev: gbefb: Only instantiate device when built for IP32 - drm/nouveau/debugfs: fix file release memory leak - gve: Correct available tx qpl check - rtnetlink: fix if_nlmsg_stats_size() under estimation - gve: fix gve_get_stats() - i40e: fix endless loop under rtnl - i40e: Fix freeing of uninitialized misc IRQ vector - net: prefer socket bound to interface when not in VRF - i2c: acpi: fix resource leak in reconfiguration device addition - bpf, s390: Fix potential memory leak about jit_data - RISC-V: Include clone3() on rv32 - x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI - x86/hpet: Use another crystalball to evaluate HPET usability - x86/Kconfig: Correct reference to MWINCHIP3D - Linux 5.4.153 * Focal update: v5.4.152 upstream stable release (LP: #1950009) - net: mdio: introduce a shutdown method to mdio device drivers - xen-netback: correct success/error reporting for the SKB-with-fraglist case - sparc64: fix pci_iounmap() when CONFIG_PCI is not set - ext2: fix sleeping in atomic bugs on error - scsi: sd: Free scsi_disk device via put_device() - usb: testusb: Fix for showing the connection speed - usb: dwc2: check return value after calling platform_get_resource() - selftests: be sure to make khdr before other targets - selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn - scsi: ses: Retry failed Send/Receive Diagnostic commands - tools/vm/page-types: remove dependency on opt_file for idle page tracking - KVM: do not shrink halt_poll_ns below grow_start - kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] - perf/x86: Reset destroy callback on event init failure - silence nfscache allocation warnings with kvzalloc - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. - Linux 5.4.152 * linux-aws: Fix backport of RDMA/efa: Expose maximum TX doorbell batch (LP: #1949882) - SAUCE: aws: Fix backport of RDMA/efa: Expose maximum TX doorbell batch [ Ubuntu: 5.4.0-91.102 ] * focal/linux: 5.4.0-91.102 -proposed tracker (LP: #1949840) * Packaging resync (LP: #1786013) - [Packaging] update Ubuntu.md - debian/dkms-versions -- update from kernel-versions (main/2021.11.08) * KVM emulation failure when booting into VM crash kernel with multiple CPUs (LP: #1948862) - KVM: x86: Properly reset MMU context at vCPU RESET/INIT * aufs: kernel bug with apparmor and fuseblk (LP: #1948470) - SAUCE: aufs: bugfix, stop omitting path->mnt * ebpf: bpf_redirect fails with ip6 gre interfaces (LP: #1947164) - net: handle ARPHRD_IP6GRE in dev_is_mac_header_xmit() * require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516) - Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc * ACL updates on OCFS2 are not revalidated (LP: #1947161) - ocfs2: fix remounting needed after setfacl command * ppc64 BPF JIT mod by 1 will not return 0 (LP: #1948351) - powerpc/bpf: Fix BPF_MOD when imm == 1 * Drop "UBUNTU: SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan is active" (LP: #1947709) - Revert "UBUNTU: SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan is active" * Reassign I/O Path of ConnectX-5 Port 1 before Port 2 causes NULL dereference (LP: #1943464) - s390/pci: fix leak of PCI device structure - s390/pci: fix use after free of zpci_dev - s390/pci: fix zpci_zdev_put() on reserve * [SRU][F] USB: serial: pl2303: add support for PL2303HXN (LP: #1948377) - USB: serial: pl2303: add support for PL2303HXN - USB: serial: pl2303: fix line-speed handling on newer chips * Focal update: v5.4.151 upstream stable release (LP: #1947888) - tty: Fix out-of-bound vmalloc access in imageblit - cpufreq: schedutil: Use kobject release() method to free sugov_tunables - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory - usb: cdns3: fix race condition before setting doorbell - fs-verity: fix signed integer overflow with i_size near S64_MAX - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field - scsi: ufs: Fix illegal offset in UPIU event trace - mac80211: fix use-after-free in CCMP/GCMP RX - x86/kvmclock: Move this_cpu_pvti into kvmclock.h - drm/amd/display: Pass PCI deviceid into DC - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap - mac80211: mesh: fix potentially unaligned access - mac80211-hwsim: fix late beacon hrtimer handling - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb - hwmon: (tmp421) report /PVLD condition as fault - hwmon: (tmp421) fix rounding for negative values - net: ipv4: Fix rtnexthop len when RTA_FLOW is present - e100: fix length calculation in e100_get_regs_len - e100: fix buffer overrun in e100_get_regs - selftests, bpf: test_lwt_ip_encap: Really disable rp_filter - scsi: csiostor: Add module softdep on cxgb4 - net: hns3: do not allow call hns3_nic_net_open repeatedly - net: sched: flower: protect fl_walk() with rcu - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses - perf/x86/intel: Update event constraints for ICX - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings - debugfs: debugfs_create_file_size(): use IS_ERR to check for error - ipack: ipoctal: fix stack information leak - ipack: ipoctal: fix tty registration race - ipack: ipoctal: fix tty-registration error handling - ipack: ipoctal: fix missing allocation-failure check - ipack: ipoctal: fix module reference leak - ext4: fix loff_t overflow in ext4_max_bitmap_size() - ext4: fix reserved space counter leakage - ext4: fix potential infinite loop in ext4_dx_readdir() - HID: u2fzero: ignore incomplete packets without data - net: udp: annotate data race around udp_sk(sk)->corkflag - net: stmmac: don't attach interface until resume finishes - PCI: Fix pci_host_bridge struct device release/free handling - libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind - hso: fix bailout in error case of probe - usb: hso: fix error handling code of hso_create_net_device - usb: hso: remove the bailout parameter - crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() - HID: betop: fix slab-out-of-bounds Write in betop_probe - netfilter: ipset: Fix oversized kvmalloc() calls - HID: usbhid: free raw_report buffers in usbhid_stop - Linux 5.4.151 * Focal update: v5.4.150 upstream stable release (LP: #1947886) - usb: gadget: r8a66597: fix a loop in set_feature() - usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave - usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA - usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() - cifs: fix incorrect check for null pointer in header_assemble - xen/x86: fix PV trap handling on secondary processors - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter - USB: cdc-acm: fix minor-number release - binder: make sure fd closes complete - staging: greybus: uart: fix tty use after free - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk - USB: serial: mos7840: remove duplicated 0xac24 device ID - USB: serial: option: add Telit LN920 compositions - USB: serial: option: remove duplicate USB device ID - USB: serial: option: add device id for Foxconn T99W265 - mcb: fix error handling in mcb_alloc_bus() - erofs: fix up erofs_lookup tracepoint - btrfs: prevent __btrfs_dump_space_info() to underflow its free space - serial: mvebu-uart: fix driver's tx_empty callback - net: hso: fix muxed tty registration - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation - platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() - enetc: Fix illegal access when reading affinity_hint - bnxt_en: Fix TX timeout when TX ring size is set to the smallest - net/smc: add missing error check in smc_clc_prfx_set() - gpio: uniphier: Fix void functions to remove return value - qed: rdma - don't wait for resources under hw error recovery flow - net/mlx4_en: Don't allow aRFS for encapsulated packets - scsi: iscsi: Adjust iface sysfs attr detection - tty: synclink_gt, drop unneeded forward declarations - tty: synclink_gt: rename a conflicting function name - fpga: machxo2-spi: Return an error on failure - fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() - thermal/core: Potential buffer overflow in thermal_build_list_of_policies() - cifs: fix a sign extension bug - scsi: qla2xxx: Restore initiator in dual mode - scsi: lpfc: Use correct scnprintf() limit - irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build - irqchip/gic-v3-its: Fix potential VPE leak on error - md: fix a lock order reversal in md_alloc - blktrace: Fix uaf in blk_trace access after removing by sysfs - net: macb: fix use after free on rmmod - net: stmmac: allow CSR clock of 300MHz - m68k: Double cast io functions to unsigned long - ipv6: delay fib6_sernum increase in fib6_add - bpf: Add oversize check before call kvcalloc() - xen/balloon: use a kernel thread instead a workqueue - nvme-multipath: fix ANA state updates when a namespace is not present - sparc32: page align size in arch_dma_alloc - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd - compiler.h: Introduce absolute_pointer macro - net: i825xx: Use absolute_pointer for memcpy from fixed memory location - sparc: avoid stringop-overread errors - qnx4: avoid stringop-overread errors - parisc: Use absolute_pointer() to define PAGE0 - arm64: Mark __stack_chk_guard as __ro_after_init - alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile - net: 6pack: Fix tx timeout and slot time - spi: Fix tegra20 build with CONFIG_PM=n - EDAC/synopsys: Fix wrong value type assignment for edac_mode - thermal/drivers/int340x: Do not set a wrong tcc offset on resume - arm64: dts: marvell: armada-37xx: Extend PCIe MEM space - xen/balloon: fix balloon kthread freezing - qnx4: work around gcc false positive warning bug - Linux 5.4.150 * ACL updates on OCFS2 are not revalidated (LP: #1947161) // Focal update: v5.4.150 upstream stable release (LP: #1947886) - ocfs2: drop acl cache for directories too * Focal update: v5.4.149 upstream stable release (LP: #1947885) - PCI: pci-bridge-emul: Fix big-endian support - PCI: aardvark: Indicate error in 'val' when config read fails - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register - PCI: aardvark: Fix reporting CRS value - PCI/ACPI: Add Ampere Altra SOC MCFG quirk - KVM: remember position in kvm->vcpus array - console: consume APC, DM, DCS - s390/pci_mmio: fully validate the VMA before calling follow_pte() - ARM: Qualify enabling of swiotlb_init() - apparmor: remove duplicate macro list_entry_is_head() - ARM: 9077/1: PLT: Move struct plt_entries definition to header - ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() - ARM: 9079/1: ftrace: Add MODULE_PLTS support - ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE - sctp: validate chunk size in __rcv_asconf_lookup - sctp: add param size validation for SCTP_PARAM_SET_PRIMARY - staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() - um: virtio_uml: fix memory leak on init failures - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ - thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() - 9p/trans_virtio: Remove sysfs file on probe failure - prctl: allow to setup brk for et_dyn executables - nilfs2: use refcount_dec_and_lock() to fix potential UAF - profiling: fix shift-out-of-bounds bugs - pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered - phy: avoid unnecessary link-up delay in polling mode - net: stmmac: reset Tx desc base address before restarting Tx - Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH - thermal/core: Fix thermal_cooling_device_register() prototype - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() - parisc: Move pci_dev_is_behind_card_dino to where it is used - dmaengine: sprd: Add missing MODULE_DEVICE_TABLE - dmaengine: ioat: depends on !UML - dmaengine: xilinx_dma: Set DMA mask for coherent APIs - ceph: request Fw caps before updating the mtime in ceph_write_iter - ceph: lockdep annotations for try_nonblocking_invalidate - btrfs: fix lockdep warning while mounting sprout fs - nilfs2: fix memory leak in nilfs_sysfs_create_device_group - nilfs2: fix NULL pointer in nilfs_##name##_attr_release - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group - pwm: img: Don't modify HW state in .remove() callback - pwm: rockchip: Don't modify HW state in .remove() callback - pwm: stm32-lp: Don't modify HW state in .remove() callback - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() - rtc: rx8010: select REGMAP_I2C - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV - Linux 5.4.149 -- Wen-chien Jesse Sung